Selected engineering work

Infrastructure is the product.

A portfolio of systems, tools, and operational workflows built to make production environments safer to change and easier to recover.

Projects

Problem → decision → working artifact.

These projects show the kinds of engineering decisions I make: explicit boundaries, safe defaults, durable state, practical automation, and documentation that helps the next person operate the system.

Systems designStePanel

Reliability and capacityFPM Lens

Incident responseSupport-DoKtor

Configuration managementAnsible collection

Security automationFail2ban hardening

FPM LENS / CAPACITY PLANCONFIDENCE 0.86

4096MB memory budget

OS / services

Pool A

Pool B

Reserve

Observed workload → explainable recommendation

SUPPORT-DOKTOR / INCIDENTREAD FIRST

03:12load increases

03:14PHP workers saturated

03:16database CPU rises

03:19recovery plan generated

Evidence before intervention

FLAGSHIP / GO / LINUX

StePanel

Modern control plane for Linux web hosting and cPanel cpmove migrations.

BuiltGo application, authenticated API, dashboard workflows, durable jobs, backup and restore paths.

DecidedValidate, stage, authorize, and audit risky operations instead of hiding them behind one click.

InspectREADME, docs, job model, auth/session handling, migration workflow, tests, and release notes.

View repository ↗

PYTHON / INCIDENT RESPONSE

Support-DoKtor

CLI for Linux hosting diagnostics, incident triage, and safe recovery planning across cPanel, CWP, and unmanaged VPS environments.

SignalTurns first-response investigation into a repeatable, inspectable workflow.

InspectRead-first diagnostics, recovery-plan generation, log handling, and production-safety boundaries.

View repository ↗

PHP-FPM / CAPACITY

FPM Lens

Measures PHP-FPM workloads and turns memory and process observations into reviewable pool-capacity recommendations.

SignalConnects observed workload, memory limits, and configuration decisions instead of guessing at worker counts.

InspectCapacity model, uncertainty handling, refusal of impossible plans, release artifacts, and verification docs.

View repository ↗

ANSIBLE / AUTOMATION

Infrastructure automation collection

Linux infrastructure, automation, and operations tooling organized for repeatable administration.

SignalEncodes operational knowledge into reusable, reviewable automation.

InspectRoles, playbooks, Molecule coverage, linting, and Ubuntu/AlmaLinux compatibility targets.

View repository ↗

LINUX SECURITY

Fail2ban hardening

Automated, validated Fail2ban installation for SSH, web, mail, and service protection.

SignalSecurity automation with validation and clear host-level behavior.

InspectPanel detection, CSF-aware firewall behavior, atomic config changes, validation, and rollback paths.

View repository ↗

KUBERNETES / LAB

Kubernetes platform lab

A practical Kubernetes environment for workloads, persistence, observability, and platform operations.

SignalShows the move from individual hosts toward clustered platform thinking.

View repository ↗

RECOVERY / CPANEL

WordPress archive tooling

Extracts and migrates WordPress .wpress archives on cPanel hosting environments.

SignalWorks at the boundary between application data, hosting constraints, and recovery procedures.

View repository ↗

NETWORKING / LINUX

strongSwan setup

Automated strongSwan VPN setup and configuration for Linux servers.

SignalInfrastructure provisioning where secure network behavior matters more than abstraction.

View repository ↗

Want the complete picture?

Review the source, the docs, and the operating assumptions.

The repositories are the detailed artifacts. The project pages here are the map for a hiring manager who wants to understand the engineering choices quickly.

Open GitHub profile ↗

Modern platform bridge

From host-level rescue to platform engineering.

The portfolio is not only bare-metal hosting. These projects show the move into container orchestration, infrastructure as code, network provisioning, and reusable automation.

Kuberneteskube_lab · workloads, platform operations, and cluster-oriented thinking.View repository ↗

Infrastructure as codeansible_collection · reusable Linux infrastructure and operations automation.View repository ↗

Containers & GoStePanel · a Go control plane packaged for modern Linux deployment workflows.View repository ↗

Network platformsstrongSwan setup · secure VPN provisioning and host-level network configuration.View repository ↗

Documentation and runbooks

The written layer behind the systems.

Selected guides show how I turn operational knowledge into something another engineer can use without repeating the original investigation.

cPanel migration checklistInventory, backup, staging, validation, cutover, and rollback thinking.FPM Lens guideCapacity planning based on observed PHP-FPM workload and memory behavior.DNS outage checklistA practical sequence for separating delegation, records, propagation, and application symptoms.MySQL recovery guideRecovery planning that treats backups, state, validation, and dependencies as one system.

Engineering leadership signal

Make the next operator faster.

Documentation is part of the implementation: guides, runbooks, project notes, and source that explain the operating assumptions behind the tool.

Operational writingKnowledge-base guides turn recurring Linux, DNS, PHP-FPM, and recovery questions into reusable references.

Reusable systemsAnsible, Bash, Python, Go, and Kubernetes work encode repeatable decisions instead of relying on heroics.

Shared ownershipClear boundaries and handoff notes make it easier for another engineer or stakeholder to understand the current state.